2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34871 | HIGH | 7.2 | 2.3% | Aug 3, 2022 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication ... |
| CVE-2022-2272 | CRITICAL | 9.8 | 2.3% | Aug 3, 2022 | This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4... |
| CVE-2022-28684 | HIGH | 8.8 | 2.5% | Aug 3, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentica... |
| CVE-2022-28668 | HIGH | 7.8 | 0.5% | Aug 3, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro... |
| CVE-2022-35620 | CRITICAL | 9.8 | 31.3% | Aug 3, 2022 | D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the funct... |
| CVE-2022-35619 | CRITICAL | 9.8 | 2.0% | Aug 3, 2022 | D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the funct... |
| CVE-2022-34974 | CRITICAL | 9.8 | 23.0% | Aug 3, 2022 | D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function. |
| CVE-2022-34973 | HIGH | 7.5 | 14.8% | Aug 3, 2022 | D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp. |
| CVE-2022-36359 | HIGH | 8.8 | 0.7% | Aug 3, 2022 | An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application ... |
| CVE-2022-32293 | HIGH | 8.1 | 1.5% | Aug 3, 2022 | In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free... |
| CVE-2022-32292 | CRITICAL | 9.8 | 2.4% | Aug 3, 2022 | In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-ba... |
| CVE-2022-27484 | MEDIUM | 4.3 | 0.4% | Aug 3, 2022 | A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticat... |
| CVE-2022-23442 | MEDIUM | 4.3 | 0.5% | Aug 3, 2022 | An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0... |
| CVE-2022-37394 | LOW | 3.3 | 0.3% | Aug 3, 2022 | An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutr... |
| CVE-2022-35737 | HIGH | 7.5 | 22.8% | Aug 3, 2022 | SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a ... |
| CVE-2022-27621 | LOW | 3.8 | 0.6% | Aug 3, 2022 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno... |
| CVE-2022-36800 | MEDIUM | 4.3 | 0.5% | Aug 3, 2022 | Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse... |
| CVE-2022-27620 | MEDIUM | 4.9 | 1.2% | Aug 3, 2022 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno... |
| CVE-2022-27619 | MEDIUM | 5.9 | 0.3% | Aug 3, 2022 | Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Clie... |
| CVE-2022-27618 | MEDIUM | 6.5 | 1.2% | Aug 3, 2022 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno... |
| CVE-2022-27617 | MEDIUM | 4.3 | 0.8% | Aug 3, 2022 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno... |
| CVE-2022-34969 | HIGH | 7.5 | 0.8% | Aug 3, 2022 | PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference. |
| CVE-2022-34968 | HIGH | 7.5 | 0.8% | Aug 3, 2022 | An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service... |
| CVE-2022-34967 | HIGH | 7.5 | 0.8% | Aug 3, 2022 | The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13. |
| CVE-2022-34943 | — | — | — | Aug 3, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now